ShinyHunters Claims BCD Travel Data Compromise, Sets June 1 Pay-or-Leak Deadline
Summary
ShinyHunters claims it exfiltrated more than 700,000 BCD Travel Salesforce records and corporate SharePoint data, demanding contact by June 1, 2026, or threatening to leak the data. The claim is unconfirmed.
Key points
- ShinyHunters claims BCD Travel data was compromised; the post says the information is based on the group's public claims and is unconfirmed.
- The claim alleges exfiltration of more than 700,000 Salesforce records and data from corporate SharePoint sites.
- The actor reportedly issued a final pay-or-leak warning, setting June 1, 2026, as the deadline to make contact.
- The monitoring record identifies BCD Travel in the Netherlands as the victim and gives May 29, 2026, as the discovery date.
Article Details
- Victim
- BCD Travel
- Victim Domain
- Unknown
- Claim Date
- 2026-05-29
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by Shinyhunters; not independently confirmed by the source.
- Exfiltrated Data
- Shinyhunters claimed that Salesforce records and corporate data from SharePoint sites were compromised.
- Exfiltrated Size
- Over 700,000 Salesforce records; additional volume not disclosed.
- Ransom Demand
- A pay-or-leak demand was reported, with contact requested by 2026-06-01; no monetary amount was disclosed.
- Leak Status
- Leak threatened before 2026-06-01; no leak reported in the source.
Threat Actors
Products
Microsoft SharePointShinyhunters has claimed to compromise BCD Travel’s data in the Netherlands, exfiltrating over 700,000 Salesforce records and various SharePoint corporate sites.SalesforceShinyhunters has claimed to compromise BCD Travel’s data in the Netherlands, exfiltrating over 700,000 Salesforce records and various SharePoint corporate sites.